Supported editions for this feature: Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus. Compare your edition
Email users can report messages in their inboxes as spam, not spam, or phishing. With Gmail, this trains the system to identify similar messages as spam, not spam, or phishing in the future. User reports allows you to view how users are marking their messages--whether spam, not spam, or phishing--for a specific time period.
Note: The security dashboard also includes a summary of user report data. For details, see Security dashboard.
View the user report
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
Security
Security center
- In the lower-right corner of the User reports panel, click View Report.
User reports graph
If a message is considered suspicious but also has positive qualities (for example, if the message's sender is whitelisted) then the message may be placed in a user's inbox. This graph shows messages broken down by Not spam, Spam, and Phishing:
- Not spam—Number of messages marked as Not spam
- Spam—Number of messages marked as Spam
- Phishing—Number of messages marked as Phishing
Note: You can hide lines in the graph by clicking on the legend. For example, click Spam to hide this line in the graph. This is especially useful if one line overlaps another.
Using the drop-down menus above the graph, you can customize the graph to provide details only about certain types of messages:
| Filter | Description |
|---|---|
| Traffic source: All, External, or Internal | External—Include only messages sent by users outside of your domain Internal—Include only messages sent by users inside of your domain. |
| Domain | Choose the domain for your report. |
| Date range |
Customize the report to view data from Today, Yesterday, This week, Last week, This month, Last month, or Days ago (up to 180 days); or enter a Start date and End date. Click Apply after you set the date range. Note: For this report, data is displayed only for the last 31 days. For example, if you set the parameters for up to 60 days, the data in the report is cut off at 31 days. |
To generate a spreadsheet with the graph’s data, click Export Sheet. A spreadsheet corresponding to the data in the User reports graph will be generated and saved to your My Drive folder.
Compare current and historical data
To compare the current data to historical data, in the top right, from the Statistical analysis menu, select Percentile (not available for all Security dashboard charts). You’ll see an overlay on the chart to show the 10th, 50th, and 90th percentile of historical data (180 days for most data and 30 days for Gmail data). Then, to change the analysis, at the top right of the chart, use the menu to change the overlay line.
User reports table
You can also see more details about the number of spam messages that were sent to your domain by clicking a data point in the graph. Details are displayed in the table below the graph.
Note: Attachment file names that are very long and unreadable are truncated in the User reports table.
